$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: t/QZFXSMNdkUwIZNpv5IaFBTtNR/TRI3Dm7+YzbTCCo= Subject key identifier: 56:C6:FE:B3:C1:76:3C:A7:1B:41:72:A0:CC:94:88:CB:5C:BC:D2:3F Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 02A2429459AC143B3A9BD39560DFEB818191D52C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 019D Signing time: Wed 25 Mar 2026 21:20:45 +0000 Manifest this update: Wed 25 Mar 2026 21:15:45 +0000 Manifest next update: Sun 29 Mar 2026 04:26:45 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: uo1cMNpWFv4feV72yjNaPxYXpzfjY0BipUvVRJ4xjoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a2:42:94:59:ac:14:3b:3a:9b:d3:95:60:df:eb:81:81:91:d5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Mar 25 21:15:45 2026 GMT Not After : Mar 29 04:26:45 2026 GMT Subject: CN=56C6FEB3C1763CA71B4172A0CC9488CB5CBCD23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:f7:2e:87:87:2a:8b:99:44:3e:e0:9c:85: ed:60:fa:dd:04:1a:ab:dd:1d:f5:fe:98:82:76:a7: 6d:6b:66:43:45:45:5d:f6:ac:76:51:b8:b7:cd:70: 35:48:6a:79:38:7f:13:23:03:3e:15:09:eb:4f:57: c1:bd:90:47:7b:1b:6f:a5:51:9b:2d:ee:90:0c:b8: 83:8b:74:5b:b3:a9:de:fa:ab:d0:4c:ba:5b:60:f5: c3:66:c5:85:7b:17:85:2d:b9:68:dc:23:32:21:e2: 78:65:ed:61:c2:38:48:a9:1f:bd:45:4e:af:62:c1: 78:c9:90:7e:d7:b8:bf:3e:79:ee:eb:ef:3c:5d:15: c9:f5:24:f2:f9:e7:7c:79:e0:db:cd:67:e2:a3:25: 4a:09:98:c5:40:d8:e8:3c:a8:64:f5:c0:ec:ff:05: ee:3b:d9:0c:46:4c:4b:95:90:74:a5:78:62:8d:0c: 7e:5c:53:7a:24:9f:c2:ec:2e:90:15:ce:96:84:a4: 57:36:81:fb:36:71:3a:45:35:7d:fe:50:02:73:6c: e6:94:f5:fe:ce:5c:55:6f:af:ef:bc:7e:91:c9:1d: 6e:0e:11:44:a3:5b:dd:a6:3f:8e:d3:97:ab:b5:1f: 7f:0d:a9:e9:ac:78:e8:ce:46:3d:48:f3:0e:81:7a: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C6:FE:B3:C1:76:3C:A7:1B:41:72:A0:CC:94:88:CB:5C:BC:D2:3F X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:67:06:12:70:01:25:cd:79:db:ad:6e:6b:79:3b:c5:d7:8b: de:5b:bb:1b:5a:5a:88:ff:cf:51:34:16:98:f2:8c:bf:04:cc: 57:5c:31:5d:24:51:4d:c2:e6:ec:e5:c0:7f:a1:c9:b3:eb:69: 16:92:ac:09:e9:69:ae:76:4f:87:4a:2f:e5:e4:ca:9f:bb:6c: 73:43:25:95:b5:d0:25:31:13:87:50:c9:40:e3:27:d6:83:f5: 04:c8:78:f6:f0:92:d0:fb:c4:9d:3e:5b:14:c0:c2:30:e7:96: 2d:a6:ee:3a:0b:16:85:31:b4:3b:3f:17:82:80:ea:a5:f3:a4: a1:43:c4:92:fa:b3:bd:57:08:2e:91:96:cb:bf:26:0d:b0:0e: ad:7c:54:be:97:e2:21:db:98:1e:4a:28:2d:2f:8f:83:ea:fc: c1:c7:f4:87:37:9d:2e:6d:a1:57:75:f9:22:6f:cd:99:cc:53: 69:f6:bc:78:de:25:77:3c:fc:51:59:06:06:60:1d:11:74:88: 1b:ac:9e:21:ec:a8:70:38:c7:39:39:65:a7:05:74:9f:68:37: 2c:c8:94:a4:30:66:39:15:6e:e9:cc:5c:53:40:a7:24:4c:e6: 2c:94:04:2c:ae:ed:c6:d7:a6:ca:72:23:47:98:0d:a3:10:26: 56:a8:91:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqJClFmsFDs6m9OVYN/rgYGR1SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNjAzMjUyMTE1NDVaFw0yNjAzMjkwNDI2NDVaMDMxMTAvBgNV BAMTKDU2QzZGRUIzQzE3NjNDQTcxQjQxNzJBMENDOTQ4OENCNUNCQ0QyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19vcuh4cqi5lEPuCche1g+t0E GqvdHfX+mIJ2p21rZkNFRV32rHZRuLfNcDVIank4fxMjAz4VCetPV8G9kEd7G2+l UZst7pAMuIOLdFuzqd76q9BMultg9cNmxYV7F4UtuWjcIzIh4nhl7WHCOEipH71F Tq9iwXjJkH7XuL8+ee7r7zxdFcn1JPL553x54NvNZ+KjJUoJmMVA2Og8qGT1wOz/ Be472QxGTEuVkHSleGKNDH5cU3okn8LsLpAVzpaEpFc2gfs2cTpFNX3+UAJzbOaU 9f7OXFVvr++8fpHJHW4OEUSjW92mP47Tl6u1H38NqemseOjORj1I8w6BekYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsb+s8F2PKcbQXKgzJSIy1y80j8wHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRnBhJwASXNedutbmt5O8XXi95buxtaWoj/ z1E0FpjyjL8EzFdcMV0kUU3C5uzlwH+hybPraRaSrAnpaa52T4dKL+Xkyp+7bHND JZW10CUxE4dQyUDjJ9aD9QTIePbwktD7xJ0+WxTAwjDnli2m7joLFoUxtDs/F4KA 6qXzpKFDxJL6s71XCC6Rlsu/Jg2wDq18VL6X4iHbmB5KKC0vj4Pq/MHH9Ic3nS5t oVd1+SJvzZnMU2n2vHjeJXc8/FFZBgZgHRF0iBusniHsqHA4xzk5ZacFdJ9oNyzI lKQwZjkVbunMXFNApyRM5iyUBCyu7cbXpspyI0eYDaMQJlaokdY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:32 2026 by rpki-client